General
- Target 2026-06-26_d343dfa3f0db52b7e1f563f560bcadec_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 35.6MB
- Sample260629-n75pcaet9k
- SHA256 d17182fb3203717e4b58c1b9e6c5212a625ffb877c925a8babbc334cc0fecbab
- MD5 d343dfa3f0db52b7e1f563f560bcadec
- SHA1 25ac0adfee09dbf74f35ab44d67c1d1fbf909e73
- SHA512 d651359347d7233d5472513a2c6c8a82afc67340d354a0b0a9be1e6c200a174614000d57561ec173255e6e2b51a46a9766ad0272b6379a21447ade4a03ae7d2d
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCi8Vb618U68Vb618Ul8Vb618U68Vb61f:2cDcKcDcO3cDcKcDcOucDcKcDcOr
- TLSH T1C0877B17E69444F5D16E99308B658232FA73BC120B7197CB43A0F62D2F336D06E7A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_d343dfa3f0db52b7e1f563f560bcadec_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_d343dfa3f0db52b7e1f563f560bcadec_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260629-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_d343dfa3f0db52b7e1f563f560bcadec_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 35.6MB
- SHA256 d17182fb3203717e4b58c1b9e6c5212a625ffb877c925a8babbc334cc0fecbab
- MD5 d343dfa3f0db52b7e1f563f560bcadec
- SHA1 25ac0adfee09dbf74f35ab44d67c1d1fbf909e73
- SHA512 d651359347d7233d5472513a2c6c8a82afc67340d354a0b0a9be1e6c200a174614000d57561ec173255e6e2b51a46a9766ad0272b6379a21447ade4a03ae7d2d
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCi8Vb618U68Vb618Ul8Vb618U68Vb61f:2cDcKcDcO3cDcKcDcOucDcKcDcOr
- TLSH T1C0877B17E69444F5D16E99308B658232FA73BC120B7197CB43A0F62D2F336D06E7A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application